| Yeah it is standard permission but the situation is more like this. - Facebook had some messages API for developers ( which apps can act as messenger client ), some kind of allowing 3rd party messenger applications, those had all access to messages, conversations, contacts (friends) etc - Then Facebook deprecated this API - Probably after that, someone came up with this ideas about sharing stuff on messenger, (song on spotify case, movie on netflix etc etc) - Then someone in facebook figured out they can use this old API ( in the end they trust those names, they want to do minimal development for this stuff etc ) - So they whitelisted those apps for this deprecated API So basically they messed up, by giving unlimited access to messages of users to some whitelisted apps, instead of giving let's say selective permission to just to 'send some message' over messsages |